SQL injection - Code In stdlib
Description
Empty Cmd.Path can trigger unintended binary in os/exec on Windows On Windows, executing Cmd.Run, Cmd.Start, Cmd.Output, or Cmd.CombinedOutput when Cmd.Path is unset will unintentionally trigger execution of any binaries in the working directory named either "..com" or "..exe".
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 go | 1.17.11 |
Aliases
1. 2. 3. 4. 5.
References
1. 2. 3. 4.